CUI Marking Tool
Detection, identification and protection of sensitive and confidential information
Critical Infrastructure Network Anomaly Detection
CyberSentry currently ingests hundreds of terabytes of data from Critical Infrastructure Partners every single day. At petabyte-scale over all collected network data, CyberSentry…
Malware Reverse Engineering
This AI capability uses deep learning to assist CISA analysts with understanding the content of malware samples, automating tasks such as triage and indicator extraction.
AI Assisted Compromise Email Detector (AACED)
This use case intends to solve the problem of the extensive manual effort required to review emails for signs of cyber compromise.
Cyber Threat Detection
Cyber deception is a proactive cybersecurity strategy that involves creating a network of deceptive elements, such as decoys to mislead and divert potential attackers. By strategi…
Network Security and Analysis
behavior of attack, triage
Microsoft Copilot for Security
Strengthen cybersecurity with AI-driven threat detection, response, and vulnerability management.
Machine Learning components within Splunk Enterprise Security
Clustering and Classification events
Machine Learning components within CrowdStrike
CrowdStrike uses machine learning to review security events in order to create notifications of detections and incidents for the SLAC Cybersecurity team.
CyberSearch
The AI is intended to improve the efficiency of plant personnel by giving them an easy way to access and search cybersecurity documents.
COREII
Support decision making for critical infrastructure OT cybersecurity operations. Provides a secure environment where senstive data can be ingested and retreived reliably. Reduces…
Agentic AI for cybersecurity change request reviews
Use AI Agents for cybersecurity review of documents and structured data to improve processes and to help identify areas of risk.
Crickets
Facilitate analysis and user intent on detect of access to potentially inappropriate web content
Cybersecurity Defense Tools
Addresses manual process of detecting unknown cybersecurity threats.
Exiger Supply Chain Risk Management - DDIQ Research Engine
Provides DOJ with capabilities to perform Supply Chain Risk Management assessments to support agency cybersecurity posture.
Exiger Supply Chain Risk Management - DDIQ Due Diligence Analytics
Provides DOJ with capabilities to perform Supply Chain Risk Management assessments to support agency cybersecurity posture.
Security and network monitoring using Cisco Identify Services engine
Improves security visibility, segmentation, and threat response by analyzing network traffic and user behavior in real-time, enabling automatic detection, isolation, and resolutio…
Security and Compliance in file sharing and collaboration using Kiteworks
Enhances security and compliance in file sharing and collaboration by detecting anomalies and potential threats in real-time."
Phishing Email Identification
Knowbe4 PhishER is a tool to report and manage suspicious emails. This tool use ML and AI to analyze suspicious emails to identify if the email is spam, phishing, or malicious. Th…
Autonomous Network Security
Autonomous Network Security
Managing Cybersecurity Controls
expedite the time it takes to find maliscious packets or intent with the agency's network
Application Observability Support
To assist OCIO users in monitoring critical applications for performance and availability management on premises and in the cloud environment. AI is used to create a baseline bas…
RegScale
The AI in RegScale is intended to reduce the manual workload, complexity, and latency in compliance management. It automates the extraction and initial drafting of regulatory docu…
AIP Cyber Incident Ingestion
The manual process of parsing out cyber incidents and entering them into the system